Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/8626FFC65AE511EBA452D33EC4F9AE02.roa
File: 8626FFC65AE511EBA452D33EC4F9AE02.roa (raw, json)
Hash identifier: p+jw9LTgVlA4Fas32lm4S+s3Nf7H/SOUto4eg7ZR3k4=
Subject key identifier: 86:CA:98:1F:FC:D9:AF:74:E1:32:AA:5F:29:67:30:C5:A9:05:60:1A
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0A0F
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/8626FFC65AE511EBA452D33EC4F9AE02.roa
Signing time: Sat 22 Jun 2024 21:14:00 +0000
ROA not before: Sat 22 Jun 2024 21:14:00 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 10103
IP address blocks: 14.136.0.0/16 maxlen: 24
14.198.0.0/17 maxlen: 24
14.198.128.0/18 maxlen: 24
14.198.192.0/19 maxlen: 24
14.198.224.0/20 maxlen: 24
14.199.0.0/16 maxlen: 24
43.224.232.0/22 maxlen: 24
58.176.0.0/15 maxlen: 15
58.176.0.0/16 maxlen: 24
58.177.0.0/16 maxlen: 24
59.148.0.0/15 maxlen: 15
59.148.0.0/16 maxlen: 24
59.149.0.0/16 maxlen: 24
61.92.0.0/15 maxlen: 15
61.92.0.0/16 maxlen: 24
61.93.0.0/16 maxlen: 24
61.238.0.0/15 maxlen: 15
61.238.0.0/16 maxlen: 24
61.239.0.0/16 maxlen: 24
61.244.0.0/16 maxlen: 24
103.243.0.0/22 maxlen: 24
110.235.0.0/17 maxlen: 24
119.246.0.0/15 maxlen: 15
119.246.0.0/16 maxlen: 24
119.247.0.0/16 maxlen: 24
123.202.0.0/15 maxlen: 15
123.202.0.0/16 maxlen: 24
123.203.0.0/16 maxlen: 24
124.244.0.0/16 maxlen: 24
183.178.0.0/15 maxlen: 15
183.178.0.0/16 maxlen: 24
183.179.0.0/16 maxlen: 24
202.77.4.0/22 maxlen: 24
202.77.24.0/21 maxlen: 24
202.77.32.0/19 maxlen: 24
203.80.64.0/18 maxlen: 24
203.80.192.0/18 maxlen: 24
203.185.0.0/18 maxlen: 24
203.186.0.0/16 maxlen: 24
210.6.0.0/16 maxlen: 24
2401:f400::/32 maxlen: 32
2403:f500::/32 maxlen: 32
2403:f500::/35 maxlen: 35
2403:f500:2000::/35 maxlen: 35
2403:f500:6000::/35 maxlen: 35
2403:f500:8000::/35 maxlen: 35
2403:f500:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 19:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2575 (0xa0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Jun 22 21:14:00 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66773e98-76d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:cb:60:bd:12:42:1a:84:b0:de:93:5a:da:
02:0d:f4:4a:81:7d:09:05:dc:b8:52:9d:a9:9e:75:
b6:54:15:ff:0c:0d:cc:d4:d6:55:10:34:39:78:37:
e3:9e:f2:b9:a1:f0:f1:33:03:fb:3a:37:bf:f8:8a:
e1:d0:01:e0:55:4f:82:6c:14:4e:68:56:bd:3c:79:
98:68:bc:be:d6:9f:43:60:e4:06:74:60:4d:7e:4a:
7a:52:4a:26:1b:82:15:81:a4:0f:cf:4d:a2:2e:bd:
b3:c2:2a:12:19:39:a1:8a:41:ea:6d:92:fd:7b:7b:
c7:ed:19:d1:43:21:38:20:76:f6:c8:00:bc:1d:31:
ac:d6:6e:42:b0:91:ef:eb:9b:51:2b:98:39:de:2c:
05:ee:7b:2f:21:31:7d:63:6a:21:f1:b3:4d:2e:9b:
c2:f5:86:1e:58:2b:a2:00:78:00:f6:cf:90:4f:40:
b8:23:de:60:13:81:13:6a:7d:49:da:0a:61:fe:21:
33:0c:a7:e3:dd:e5:0a:af:e8:73:55:02:d3:4b:7d:
06:9a:43:c9:78:ef:3a:43:7c:5b:a6:a0:35:2f:07:
92:13:14:aa:8e:d0:74:0e:d0:5a:27:e1:7a:83:f1:
28:5f:ce:58:dc:6d:b7:34:cf:29:16:0a:90:3d:a8:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:98:1F:FC:D9:AF:74:E1:32:AA:5F:29:67:30:C5:A9:05:60:1A
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/8626FFC65AE511EBA452D33EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.136.0.0/16
14.198.0.0-14.198.239.255
14.199.0.0/16
43.224.232.0/22
58.176.0.0/15
59.148.0.0/15
61.92.0.0/15
61.238.0.0/15
61.244.0.0/16
103.243.0.0/22
110.235.0.0/17
119.246.0.0/15
123.202.0.0/15
124.244.0.0/16
183.178.0.0/15
202.77.4.0/22
202.77.24.0-202.77.63.255
203.80.64.0/18
203.80.192.0/18
203.185.0.0/18
203.186.0.0/16
210.6.0.0/16
IPv6:
2401:f400::/32
2403:f500::/32
Signature Algorithm: sha256WithRSAEncryption
e1:5c:5a:38:57:f6:f5:93:ed:a3:6f:f9:52:47:72:5c:83:25:
ed:4b:91:bd:aa:85:cb:a1:cd:df:6d:5e:53:9b:bb:79:5f:ee:
67:bb:de:36:27:fc:d0:49:2d:f7:35:29:3a:43:32:77:0f:81:
c4:44:02:22:8f:39:c6:b1:aa:5e:28:6d:16:02:f7:dd:4c:46:
34:48:90:6c:0e:99:5e:7d:23:71:83:0b:31:d3:02:10:33:81:
72:1a:b4:70:10:2f:79:9d:de:09:54:af:45:80:1a:66:32:71:
e3:a2:da:3e:f7:79:89:d9:51:a8:b8:49:8a:da:fb:78:77:ed:
ff:11:cd:1c:e0:85:3e:0c:63:46:33:b9:04:2a:27:57:c3:4e:
9b:4c:49:ed:55:46:68:fd:55:25:9b:a4:96:b1:18:82:db:82:
24:94:23:fd:12:d6:7c:ee:4a:2d:65:7c:b1:c1:27:c1:ae:39:
46:e0:0a:17:dc:9e:18:26:e5:97:34:f6:ba:4b:fa:a3:d4:bf:
a2:95:52:05:84:2a:c8:b0:78:be:6b:7f:26:ed:48:d4:18:18:
25:80:5e:b4:ce:b1:fb:d2:70:7b:5f:d2:14:f2:fa:cd:96:de:
5c:8f:68:4b:cd:aa:8d:d8:c4:55:57:5a:89:85:e6:5d:aa:7e:
78:ab:89:2a
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE
NTQ0QTYyQTYwHhcNMjQwNjIyMjExNDAwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc3M2U5OC03NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr5jLYL0SQhqEsN6TWtoCDfRKgX0JBdy4Up2pnnW2VBX/DA3M1NZVEDQ5eDfj
nvK5ofDxMwP7Oje/+Irh0AHgVU+CbBROaFa9PHmYaLy+1p9DYOQGdGBNfkp6Ukom
G4IVgaQPz02iLr2zwioSGTmhikHqbZL9e3vH7RnRQyE4IHb2yAC8HTGs1m5CsJHv
65tRK5g53iwF7nsvITF9Y2oh8bNNLpvC9YYeWCuiAHgA9s+QT0C4I95gE4ETan1J
2gph/iEzDKfj3eUKr+hzVQLTS30GmkPJeO86Q3xbpqA1LweSExSqjtB0DtBaJ+F6
g/EoX85Y3G23NM8pFgqQPajt4QIDAQABo4IDMDCCAywwHQYDVR0OBBYEFIbKmB/8
2a904TKqXylnMMWpBWAaMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1
MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY0N0MvNDM3Q0M0MDY4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvODYyNkZGQzY1
QUU1MTFFQkE0NTJEMzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbkGCCsGAQUFBwEHAQH/
BIGpMIGmMIGNBAIAATCBhgMDAA6IMAsDAwEOxgMEBA7G4AMDAA7HAwQCK+DoAwMB
OrADAwE7lAMDAT1cAwMBPe4DAwA99AMEAmfzAAMEB27rAAMDAXf2AwMBe8oDAwB8
9AMDAbeyAwQCyk0EMAwDBAPKTRgDBAbKTQADBAbLUEADBAbLUMADBAbLuQADAwDL
ugMDANIGMBQEAgACMA4DBQAkAfQAAwUAJAP1ADANBgkqhkiG9w0BAQsFAAOCAQEA
4VxaOFf29ZPto2/5UkdyXIMl7UuRvaqFy6HN321eU5u7eV/uZ7veNif80Ekt9zUp
OkMydw+BxEQCIo85xrGqXihtFgL33UxGNEiQbA6ZXn0jcYMLMdMCEDOBchq0cBAv
eZ3eCVSvRYAaZjJx46LaPvd5idlRqLhJitr7eHft/xHNHOCFPgxjRjO5BConV8NO
m0xJ7VVGaP1VJZuklrEYgtuCJJQj/RLWfO5KLWV8scEnwa45RuAKF9yeGCbllzT2
ukv6o9S/opVSBYQqyLB4vmt/Ju1I1BgYJYBetM6x+9Jwe1/SFPL6zZbeXI9oS82q
jdjEVVdaiYXmXap+eKuJKg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:36 2024 by rpki-client on console-fra.rpki-client.org